config

Documentation

Index

• type Config
  • func DefaultConfig() *Config
  • func LoadConfig(name string) (*Config, error)
• type Mutator
• type NomadServer
• type NomadServerTLS
• type NotationVerifierConfig
• type OpaRule
• type ProxyTLS
• type RequestContext
• type Validator
• type Webhook

Types

type Config

type Config struct {
	Port int    `hcl:"port,optional"`
	Bind string `hcl:"bind,optional"`

	LogLevel string    `hcl:"log_level,optional"`
	Tls      *ProxyTLS `hcl:"tls,block"`

	Nomad      *NomadServer `hcl:"nomad,block"`
	Validators []Validator  `hcl:"validator,block"`
	Mutators   []Mutator    `hcl:"mutator,block"`
}

func DefaultConfig

func DefaultConfig() *Config

func LoadConfig

func LoadConfig(name string) (*Config, error)

type Mutator

type Mutator struct {
	Type         string   `hcl:"type,label"`
	Name         string   `hcl:"name,label"`
	OpaRule      *OpaRule `hcl:"opa_rule,block"`
	Webhook      *Webhook `hcl:"webhook,block"`
	ResolveToken bool     `hcl:"resolve_token,optional"`
}

type NomadServer

type NomadServer struct {
	Address string          `hcl:"address"`
	TLS     *NomadServerTLS `hcl:"tls,block"`
}

type NomadServerTLS

type NomadServerTLS struct {
	CaFile             string `hcl:"ca_file"`
	CertFile           string `hcl:"cert_file"`
	KeyFile            string `hcl:"key_file"`
	InsecureSkipVerify bool   `hcl:"insecure_skip_verify,optional"`
}

type NotationVerifierConfig

type NotationVerifierConfig struct {
	TrustPolicyFile     string `hcl:"trust_policy_file"`
	TrustStoreDir       string `hcl:"trust_store_dir"`
	RepoPlainHTTP       bool   `hcl:"repo_plain_http,optional"`
	MaxSigAttempts      int    `hcl:"max_sig_attempts,optional"`
	CredentialStoreFile string `hcl:"credential_store_file,optional"`
}

type OpaRule

type OpaRule struct {
	Query    string                  `hcl:"query"`
	Filename string                  `hcl:"filename"`
	Notation *NotationVerifierConfig `hcl:"notation,block"`
}

type ProxyTLS

type ProxyTLS struct {
	CertFile     string `hcl:"cert_file"`
	KeyFile      string `hcl:"key_file"`
	CaFile       string `hcl:"ca_file"`
	NoClientCert bool   `hcl:"no_client_cert,optional"`
}

type RequestContext

type RequestContext struct {
	ClientIP     string        `json:"clientIP"`
	AccessorID   string        `json:"accessorID"`
	ResolveToken bool          `json:"resolveToken"`
	TokenInfo    *api.ACLToken `json:"tokenInfo,omitempty"`
}

type Validator

type Validator struct {
	Type         string   `hcl:"type,label"`
	Name         string   `hcl:"name,label"`
	OpaRule      *OpaRule `hcl:"opa_rule,block"`
	Webhook      *Webhook `hcl:"webhook,block"`
	ResolveToken bool     `hcl:"resolve_token,optional"`

	Notation *NotationVerifierConfig `hcl:"notation,block"`
}

type Webhook

type Webhook struct {
	Endpoint string `hcl:"endpoint"`
	Method   string `hcl:"method"`
}